Personal Data and Privacy Policy

Last Updated: 26 August 2025

This Privacy Policy explains how Commoditic (“Commoditic,” “we,” “our,” or “us”), providing data services worldwide, collects, uses, stores, and protects your personal data when you use our website (www.commoditic.com) and related services (the “Services”).

We respect your privacy and are committed to protecting your personal information in line with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

By accessing or using our Website and Services, you agree to the terms of this Privacy Policy.

1
The information we collect
2
How we use your personal data
3
Sharing and transfers of data
4
How we keep your data safe
6
Your rights
5
Cookies

The Information We Collect From You

We collect different types of information depending on how you interact with our Website and Services:

a) Information you provide directly

  • Name, company name, and job title
  • Contact details (such as email address and country)
  • Billing information (including company address, VAT number, payment details—processed via secure third-party providers and credit card information is not stored)
  • Support requests or communication you send us

b) Information collected automatically

  • IP address, browser type, operating system
  • API call activity (e.g., timestamps, endpoints used, volume of requests, API key identifiers)
  • Website usage data (pages visited, clicks, time spent, referral links)
  • Cookies and similar technologies (see Section 7 below)

c) Information from third parties
In some cases, we may receive information from trusted partners (e.g., payment processors, analytics providers).

How We Use Your Personal Data

We process personal data for the following purposes:

  • To provide and operate our APIs, datasets, and subscription services
  • To manage billing and payments (through third-party payment processors—we do not store your credit card details)
  • To respond to inquiries, provide support, and communicate with you
  • To improve and optimize our Services, including analytics and troubleshooting
  • To send service updates, legal notices, and (if you have opted in) marketing communications
  • To comply with legal obligations and enforce our Terms and Conditions
  • To detect, prevent, and investigate fraudulent or unauthorized activity

We do not sell or rent your personal data to third parties.

Sharing and Transfers of Data

We may share personal data in limited circumstances:

  • Service providers and partners who help us operate (e.g., hosting providers, analytics, payment processors, legal or accounting professionals).
  • Legal obligations where disclosure is required by law, regulation, or valid court order.
  • Business transfers in the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

If data is transferred outside the European Economic Area (EEA) (e.g., to the US), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or equivalent protections.

How We Keep Your Data Safe

We use technical, administrative, and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

  • Encrypted transmission (HTTPS)
  • Access controls and authentication
  • Regular system monitoring and security audits
  • Use of secure, industry-standard payment processors

Despite our efforts, no system is 100% secure. We encourage you to use strong passwords, keep your credentials safe, and notify us immediately if you suspect any unauthorized access.

Your Rights

As a data subject under GDPR (and similar laws in other jurisdictions), you have the following rights:

  • Access – request a copy of your personal data we hold
  • Rectification – request correction of inaccurate or incomplete data
  • Erasure – request deletion of your personal data (subject to legal requirements)
  • Restriction – limit how your data is processed in certain cases
  • Portability – request transfer of your data to another provider in a structured format
  • Objection – object to certain processing, including direct marketing
  • Withdraw Consent – revoke consent for optional processing (e.g., marketing emails)

To exercise your rights, please contact us at support@commoditic.com. We may need to verify your identity before fulfilling requests.

If you believe your data protection rights have been violated, you may lodge a complaint with your local data protection authority.

Cookies and Tracking

Our Website uses cookies and similar technologies to enhance your browsing experience, analyze traffic, and understand how our Services are used. Cookies may:

  • Remember your login preferences
  • Collect analytics on site usage
  • Support security and fraud prevention

You can disable cookies through your browser settings at any time. Note that some features of our Website may not function properly without them.

Changes to This Policy

We may update this Privacy Policy from time to time. If material changes are made, we will notify you by email (if you have an account with us). Continued use of our Services after changes take effect constitutes acceptance of the updated Policy.

Children’s Privacy

Our Services are not directed to individuals under 16 years of age, and we do not knowingly collect personal data from children. If you believe we have collected such information, please contact us and we will delete it promptly.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us via email at support@commoditic.com